Open Menu /

Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 8 files:

Smatch caller information:

mm/madvise.c madvise_guard_install() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm 4096-ptr_max
PARAM_VALUE 1 address 0-18446744073709551614
PARAM_VALUE 2 size 1-u64max
CAPPED_DATA 0 vma 1
CAPPED_DATA 1 address 1
CAPPED_DATA 1 address 1
CAPPED_DATA 2 size 1
NOSPEC 1 address
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 1 address 0-18446744073709551614[c]
USER_DATA 2 size 1-u64max[c]
NO_OVERFLOW_SIMPLE 0 vma->vm_policy->mode
UNITS 1 address unit_byte
UNITS 2 size unit_byte
HALF_LOCKED2 &madv_behavior->mm->mmap_lock

net/ipv4/tcp.c tcp_zerocopy_receive() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->sched_class->uclamp_enabled 0-1
PARAM_VALUE 0 vma->vm_ops 2036619902561484800
PARAM_VALUE 2 size 4096-4294963200
CAPPED_DATA 1 address 1
CAPPED_DATA 1 address 1
CAPPED_DATA 2 size 1
DATA_SOURCE 0 vma r find_tcp_vma
BIT_INFO 1 address 0x0,0xfffffffffffff000
BIT_INFO 1 address 0x0,0xfffffffffffff000
BIT_INFO 2 size 0x0,0xfffff000
NOSPEC 1 address
RX_PATH
NOCHECK_CALL
USER_DATA 1 address 0-u64max[c]
USER_DATA 2 size 4096-2147479552[c]
UNITS 1 address unit_byte
HALF_LOCKED2 sk
HALF_LOCKED2 sk

net/ipv4/tcp.c tcp_zerocopy_vm_insert_batch_error() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm->iommu_mm->pasid 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->delays->blkio_count 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->delays->blkio_delay_max 0-s64max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->delays->blkio_delay_min 0-s64max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->kcov->mode 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->kcov->remote 0-1
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->kcov->remote_size 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->kcov_remote->mode 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->kcov_remote->remote 0-1
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->kcov_remote->remote_size 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->sched_class->uclamp_enabled 0-1
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->sched_task_group->idle s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->thread_pid->attr->exit_code s32min-s32max
PARAM_VALUE 0 vma->vm_ops 2036619902561484800
CAPPED_DATA 0 vma->vm_start 1
DATA_SOURCE 0 vma $0
RX_PATH
NOCHECK_CALL
USER_DATA 1 address 0-u64max[c]
UNITS 2 size unit_byte
HALF_LOCKED2 sk

drivers/android/binder_alloc.c binder_alloc_free_page() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 1-u64max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->delays->blkio_count 0-4294967295
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->delays->blkio_delay_max 0-s64max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->delays->blkio_delay_min 0-s64max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->ptracer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->sched_class->uclamp_enabled 0-1
PARAM_VALUE 0 vma->vm_mm->vma_writer_wait.task->sched_task_group->idle s32min-s32max
PARAM_VALUE 2 size 4096
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 1 address unit_byte
UNITS 2 size unit_byte
LOCK2 &alloc->mutex
HALF_LOCKED2 &mm->mmap_lock
TYPE_LOCK (struct binder_alloc)->mutex

mm/memory.c remap_pfn_range_notrack() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->type 0-1
PARAM_VALUE 2 size 0,4096-u64max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma->vm_file (-1)-0,4,24,64,168-s32max
BUF_SIZE 0 vma->vm_ops (-1),144
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
CAPPED_DATA 1 address 1
CAPPED_DATA 1 address 1
DATA_SOURCE 0 vma $0
DATA_SOURCE 1 address $1
DATA_SOURCE 2 size $3
BIT_INFO 2 size 0x0,0xfffffffffffff000
BIT_INFO 2 size 0x0,0xfffffffffffff000
NOSPEC 0 vma->vm_end
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
NOSPEC 1 address
NOSPEC 1 address
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->pfnmap_track_ctx->pfn 0-13510803177078779[c]
USER_DATA 0 vma->pfnmap_track_ctx->size 0,4096-u64max[c]
USER_DATA 0 vma->shared.rb_subtree_last 0-u64max[u]
USER_DATA 0 vma->vm_end 0-u64max
USER_DATA 0 vma->vm_pgoff 0-13510803177078779[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
USER_DATA 1 address 0-u64max[c]
USER_DATA 2 size 0,4096-u64max[c]
NO_OVERFLOW_SIMPLE 0 vma->vm_file->f_mapping->host->i_size
NO_OVERFLOW_SIMPLE 0 vma->vm_pgoff
UNITS 1 address unit_byte
UNITS 2 size unit_byte

mm/memory.c zap_special_vma_range() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->encode_fh 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_parent 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->get_parent 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_flags 1024-u64max
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_mm (-1)-s32max
BUF_SIZE 0 vma->vm_ops (-1),144
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
CAPPED_DATA 0 vma->vm_start 1
DATA_SOURCE 0 vma $0
DATA_SOURCE 1 address $1
DATA_SOURCE 2 size $2
PARAM_COMPARE 1 address >= $0->vm_start
PARAM_COMPARE 1 address >= $0->vm_start
NOSPEC 0 vma->vm_end
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
NOSPEC 1 address
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->pfnmap_track_ctx->pfn 0-13510803177078779[c]
USER_DATA 0 vma->pfnmap_track_ctx->size 0,4096-u64max[c]
USER_DATA 0 vma->vm_end 0-u64max
USER_DATA 0 vma->vm_pgoff 0-13510803177078779[c]
USER_DATA 0 vma->vm_start 0-u64max[c]
USER_DATA 1 address 0-u64max
NO_OVERFLOW_SIMPLE 0 vma->vm_file->f_mapping->host->i_bytes
NO_OVERFLOW_SIMPLE 0 vma->vm_file->f_mapping->host->i_size
NO_OVERFLOW_SIMPLE 0 vma->vm_policy->mode
UNITS 1 address unit_byte
UNITS 2 size unit_byte
HALF_LOCKED2 &dev->attach_lock
HALF_LOCKED2 &encl->srcu
HALF_LOCKED2 &encl_mm->mm->mmap_lock
HALF_LOCKED2 &ggtt->vm.gt->reset.backoff_srcu
HALF_LOCKED2 &mm->mmap_lock
HALF_LOCKED2 &ufile->disassociation_lock
HALF_LOCKED2 &ufile->umap_lock
HALF_LOCKED2 obj->base.resv

kernel/events/core.c map_range() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->flags.__vma_flags 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm 4096-ptr_max
PARAM_VALUE 0 vma->vm_ops 5924194968261136384
PARAM_VALUE 0 vma->vm_ops->access 0
PARAM_VALUE 0 vma->vm_ops->close 4753065337540362240
PARAM_VALUE 0 vma->vm_ops->fault 0
PARAM_VALUE 0 vma->vm_ops->find_normal_page 0
PARAM_VALUE 0 vma->vm_ops->get_policy 0
PARAM_VALUE 0 vma->vm_ops->huge_fault 0
PARAM_VALUE 0 vma->vm_ops->map_pages 0
PARAM_VALUE 0 vma->vm_ops->mapped 0
PARAM_VALUE 0 vma->vm_ops->may_split 1460975322661076992
PARAM_VALUE 0 vma->vm_ops->mprotect 0
PARAM_VALUE 0 vma->vm_ops->mremap 0
PARAM_VALUE 0 vma->vm_ops->name 0
PARAM_VALUE 0 vma->vm_ops->open 8845452068328673280
PARAM_VALUE 0 vma->vm_ops->page_mkwrite 0
PARAM_VALUE 0 vma->vm_ops->pagesize 0
PARAM_VALUE 0 vma->vm_ops->pfn_mkwrite 7842464310733856768
PARAM_VALUE 0 vma->vm_ops->set_policy 0
PARAM_VALUE 0 vma->vm_ops->uffd_ops 0
PARAM_VALUE 2 size 4096-18446744073709547520
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_ops 144
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
CAPPED_DATA 2 size 1
DATA_SOURCE 0 vma $1
BIT_INFO 0 vma->vm_flags 0x8,0xffffffffffffffff
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
NOSPEC 1 address
NOSPEC 1 address
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->pfnmap_track_ctx->pfn 0-13510803177078779[c]
USER_DATA 0 vma->vm_end 4096-u64max[c]
USER_DATA 0 vma->vm_pgoff 0-13510803177078779[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
USER_DATA 1 address 0-18446744073709547520
USER_DATA 2 size 4096-18446744073709547520[c]
NO_OVERFLOW_SIMPLE 0 vma->vm_pgoff
UNITS 1 address unit_byte
UNITS 2 size unit_byte
LOCK2 _T->lock
HALF_LOCKED2 &ipcp->lock

kernel/bpf/arena.c zap_pages() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->private_data 4096-ptr_max
PARAM_VALUE 2 size 0,4096-18446744073709547520
CAPPED_DATA 0 vma->vm_file->private_data 1
CAPPED_DATA 0 vma->vm_start 1
DATA_SOURCE 0 vma r find_vma
DATA_SOURCE 1 address $1
BIT_INFO 2 size 0x0,0xfffffffffffff000
BIT_INFO 2 size 0x0,0xfffffffffffff000
NOCHECK_CALL
UNITS 1 address unit_byte
UNITS 2 size unit_byte
LOCK2 &arena->zap_mutex
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct bpf_arena)->zap_mutex
TYPE_LOCK (struct mm_struct)->mmap_lock

kernel/time/namespace_vdso.c zap_vma() -> zap_vma_range()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_ops 4096-ptr_max
PARAM_VALUE 0 vma->vm_private_data 4096-ptr_max
CAPPED_DATA 0 vma->vm_private_data 1
DATA_SOURCE 0 vma $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 1 address unit_byte
UNITS 2 size unit_byte
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct mm_struct)->mmap_lock